Issues found
1,646
Potential bugs reported
Last updated · Sep 4, 2026
The State of
Patch the Planet
Bugs found, patches shipped, and fixes merged at the speed of AI across all the open-source projects in the initiative.
Awaiting patch
1,031
reported + confirmed
Patches open
400
fix open upstream
Patches accepted
215
merged upstream
Projects
59
codebases under review
Issues over time
Per day
Cumulative
Peak: 224 on Jun 2 · Includes all reports filed, including reports closed during triage
Report pipeline
- Issues found 1,646
- Awaiting patch 1,031
- Patches open 400
- Patches accepted 215
Most reported projects
Accepted
Open
Awaiting patch
- scapy 257
- vllm 135
- crypto-bigint 117
- keycloak 91
- samba 89
- zeek 76
- ansible 73
- nats-server 65
- gem.coop 54
- rsync 42
Top 10 of 59 projects
Patch activity
Patch the Planet
PTP begins
Booked
Mon Wed Fri
Includes all reports filed, including reports closed during triage
Accepted fixes by severity
215 total high 17 7.9% medium 69 32.1% low 58 27.0% info 31 14.4% undetermined 40 18.6%
CVEs disclosed
11 assigned- CVE-2026-42530 high · nginx
- CVE-2026-66037 medium · vllm
- CVE-2026-54277 medium · aiohttp
- CVE-2026-54274 medium · aiohttp
- CVE-2026-54278 medium · aiohttp
- CVE-2026-11564 low · curl
- CVE-2026-54279 low · aiohttp
- CVE-2026-54276 low · aiohttp
- CVE-2026-54275 low · aiohttp
- CVE-2026-54273 low · aiohttp
- CVE-2026-54280 low · aiohttp
Accepted fixes
215 fixes| Project | Severity | Issue | CVE | Fix |
|---|---|---|---|---|
| zeek | high | DHCP: Memory exhaustion from retained options after analyzer violation | — | — |
| zeek | medium | NetBIOS: Memory exhaustion from declared session lengths | — | — |
| zeek | medium | UDP: udp_contents events could trigger out-of-bounds reads | — | — |
| zeek | high | NVT: Oversized line recovery writes before heap buffer | — | — |
| zeek | high | Invalid IPv6 fragments can lead to unbounded state growth | — | — |
| zeek | high | Redis: Parsed Redis traffic memory exhaustion | — | — |
| zeek | high | Analyzer manager: Equivalent scheduled analyzers could exhaust memory | — | — |
| zeek | high | SMB: DCE/RPC memory exhaustion from fragment state | — | — |
| zeek | high | DNP3: Memory exhaustion via file control (g70v1) fields | — | — |
| vllm | medium | PTP-VLLM-007: Flash late-interaction scoring caches query embeddings under caller-controlled request ids | — | PR |
| solady | undetermined | LibSort.groupSum returns mixed-sign int256 keys in unsigned order | — | PR |
| solady | undetermined | AddressSet.indexOf can report a stored address as missing | — | PR |
| solady | undetermined | LazyShuffler growth can produce duplicate and out-of-range values | — | PR |
| solady | undetermined | ZKsync force transfer enables repeatable reentrant extraction of pooled ETH | — | PR |
| solady | undetermined | LibBytes.uint8At returns a stale byte after a 32-to-31-byte overwrite | — | PR |
| solady | undetermined | LibTransient TStack pop underflows after clear and top accepts an empty stack | — | PR |
| solady | undetermined | zkSync beacon-proxy AndCall skips supplied initializer, allowing ownership takeover | — | PR |
| vllm | medium | PTP-VLLM-031: Mirrored multimodal IPC caches desync after a rejected request | — | PR |
| vllm | medium | PTP-VLLM-084: FireRedLID `num_mel_bins` inflates fbank width before CMVN rejection | — | PR |
| vllm | medium | PTP-VLLM-083: FireRedLID `right_context` forces attacker-sized transient audio padding | — | PR |
| vllm | medium | PTP-VLLM-114: PyAV/FFmpeg IAMF scalable-layer parsing corrupts the speech-process heap | CVE-2026-66037 | PR |
| cachecontrol | undetermined | Permanent redirects bypass freshness requirements | — | PR |
| cachecontrol | undetermined | Cache-Control directive names are parsed case-sensitively | — | PR |
| scapy | low | NetBIOS name lookups share one cache key | — | PR |
| scapy | low | HTTP_Server reuses Basic authentication across requests | — | PR |
| scapy | low | TCP sequence gaps amplify stream reassembly work | — | PR |
| scapy | low | Extended-length ISO-TP reassembly copies fragments quadratically | — | PR |
| scapy | low | SSH mpint decoding is quadratic in BitLenField | — | PR |
| scapy | low | IPv6 defragment6 is quadratic on ordered fragments | — | PR |
| openclaw | low | Active Memory can recall data for requesters denied memory tools | — | PR |
| openclaw | low | Truncated tar.bz2 listings bypass skill extraction limits | — | PR |
| openclaw | low | Matrix case folding lets distinct accounts share authorization | — | PR |
| scapy | low | FIND-400: LDAP TCP reassembly repeatedly copies incomplete search responses | — | PR |
| scapy | low | FIND-401: HPACK Huffman decoding repeatedly shifts an input-sized integer | — | PR |
| scapy | low | FIND-250: Repeatable pcapng options make rdpcap quadratic | — | PR |
| scapy | low | FIND-101: HICP Configure delimiter parsing is quadratic | — | PR |
| scapy | low | FIND-210: EcuSession unique responses cause quadratic capture cost | — | PR |
| scapy | low | FIND-410: Coalesced NBT keepalives make TCPSession quadratic | — | PR |
| openclaw | medium | Restricted user input can reach an unattended agent with write and command tools | — | PR |
| vllm | medium | PTP-VLLM-094: Unbounded Remote Media Download Causes API Server OOM DoS | — | PR |
| vllm | medium | PTP-VLLM-041: Rust multimodal frontend starts media fetch work before per-modality item limits | — | PR |
| vllm | medium | PTP-VLLM-038: Batch speech file_url bodies materialize before the audio size guard | — | PR |
| vllm | medium | PTP-VLLM-037: Chat audio bodies materialize before compressed-size rejection | — | PR |
| openclaw | medium | Config redaction exposes offline verifiers for weak Gateway passwords | — | PR |
| openclaw | medium | Model tools can use credentials from a disabled Feishu default account | — | PR |
| openclaw | info | Prior caller speech is replayed as system instructions in classic voice calls | — | PR |
| openclaw | medium | Telegram sends unvalidated host files hidden behind a valid attachment alias | — | PR |
| openclaw | medium | Requester-scoped read denies do not block outbound local attachments | — | PR |
| openclaw | low | Existing agents can keep reading memory after it is disabled | — | PR |
| openclaw | medium | Generic node invocation bypasses per-agent MCP tool denies | — | PR |
| openclaw | info | Beam receiver redirects can make OpenClaw POST transcripts to internal services | — | PR |
| openclaw | info | Gateway tool deny aliases do not override matching allows | — | PR |
| openclaw | medium | Classic inbound voice calls inherit the agent’s full tool authority | — | PR |
| openclaw | medium | Limited voice-session credentials can launch an agent with file and command tools | — | PR |
| openclaw | medium | Session filename generation can execute tools denied to the requesting user | — | PR |
| vllm | medium | PTP-VLLM-080: Duplicate stop token ids are rescanned in the scheduler on every emitted token | — | PR |
| vllm | medium | PTP-VLLM-079: Duplicate stop strings are rescanned on every emitted token | — | PR |
| vllm | medium | PTP-VLLM-064: DeepSeek V3.2 / V4 chat encoding rescans the full history for every message | — | PR |
| vllm | medium | PTP-VLLM-049: `bad_words` is bounded only after expensive frontend tokenization | — | PR |
| vllm | medium | PTP-VLLM-039: Streaming chat beam setup allocates per-choice host state before VLLM_MAX_N_SEQUENCES | — | PR |
| valkey | medium | RESET leaves CLIENT IMPORT-SOURCE privilege active across pooled connection reuse | — | PR |
| valkey | medium | Duplicate GEORADIUS STORE options bypass ACL checks for the final destination key | — | PR |
| vllm | medium | PTP-VLLM-137: Generation-config fallback drops explicit code_revision | — | PR |
| vllm | medium | PTP-VLLM-136: Incomplete artifact pin propagation in FunAudioChat and Tarsier2 | — | PR |
| vllm | medium | PTP-VLLM-135: Raw model config repair drops the trusted revision pin | — | PR |
| vllm | low | PTP-VLLM-145: Tensorizer export re-fetches auxiliary artifacts without revision | — | PR |
| vllm | low | PTP-VLLM-144: AutoAWQ metadata lookup drops the pinned revision | — | PR |
| vllm | low | PTP-VLLM-143: AutoGPTQ metadata lookup drops the pinned revision | — | PR |
| vllm | medium | PTP-VLLM-125: Processor helpers drop explicit revision and code_revision pins | — | PR |
| cryptography | low | Duplicate self-signed intermediates can cause exponential X.509 path-building CPU use | — | PR |
| cryptography | low | GCM delayed-tag decryption accepts sub-4-byte authentication tags | — | PR |
| sequelize | undetermined | AP-03-L20: setSessionVariables() can make unsafe MySQL parsing attacker-reachable | — | PR |
| sequelize | undetermined | AP-06-L01: Module-global syntax memoization retains attacker-selected paths | — | PR |
| noble-curves | info | FROST DKG round-two retry is not bound to the first roster | — | PR |
| noble-curves | info | FROST DKG round-two docs call raw private shares encrypted | — | PR |
| noble-curves | info | Recovered ECDSA verification ignores the recovery byte and accepts noncanonical signature encodings | — | PR |
| noble-curves | info | Jubjub and BabyJubJub expose unsupported Edwards-to-Montgomery conversion helpers | — | PR |
| noble-curves | info | Ed448 toMontgomery uses the E448 birational map instead of the Ed448 4-isogeny | — | PR |
| noble-curves | low | BLS verify accepts uncompressed signatures that the Signature codec rejects | — | PR |
| noble-curves | low | BLS12-381 accepts modularly equivalent non-canonical encodings | — | PR |
| curl | medium | --ssl overrides --ftp-ssl-control and permits plaintext FTP login fallback | — | PR |
| curl | low | Protocol-relative authority-changing redirects keep CURLOPT_PORT when absolute redirects clear it | — | PR |
| curl | medium | Redirected transfers can reuse TLS state established without the configured pinned public key | — | PR |
| curl | low | Native CA trust can persist after an easy handle switches to custom CA material | CVE-2026-11564 | PR |
| curl | medium | FTP wildcard LIST parsing exposes stale symlink targets to callbacks | — | PR |
| curl | low | Bare CR in response headers creates internal-parser and callback desync | — | PR |
| curl | low | CURLOPT_DISALLOW_USERNAME_IN_URL is not applied to CURLOPT_CURLU handles | — | PR |
| curl | low | Windows case-insensitive environments can make HTTP_PROXY satisfy curl's http_proxy lookup | — | PR |
| curl | medium | Windows SSPI SOCKS5 GSSAPI accepts negotiated protection that is not used | — | PR |
| curl | medium | Windows SSPI GSSAPI unwrapped data is freed with the SSPI allocator | — | PR |
| curl | low | Redirected SigV4 URL credentials can inject HTTP/1.x request headers | — | PR |
| curl | medium | Server NTLM state is not origin-bound for non-tunneled proxy reuse | — | PR |
| curl | medium | Non-secure host-only cookies can shadow Secure domain cookies | — | PR |
| curl | medium | Schannel sends origin client certificates to HTTPS proxies | — | PR |
| curl | low | Schannel automatic client certificates survive cross-origin redirects | — | PR |
| curl | low | Multiplexed non-tunneled HTTP/2 proxy reuse can store one origin's cookie under another origin | — | PR |
| curl | low | Redirected Digest URL userinfo can inject HTTP/1.x request headers | — | PR |
| curl | medium | CURL_POLL_REMOVE callback reentry can invalidate socket hash state still in use | — | PR |
| curl | info | Reused easy handles keep stale .netrc contents after NETRC_FILE changes | — | PR |
| curl | medium | DoH resolver sub-transfers do not inherit parent proxy policy | — | PR |
| curl | info | DoH inherits the Schannel automatic client-certificate option from the origin transfer | — | PR |
| crypto-bigint | info | [KEMs] Non-P-256 HPKE DHKEM helpers use the P-256 suite ID | — | PR |
| crypto-bigint | low | Fixed-width DER decode panics on oversized INTEGER values | — | PR |
| crypto-bigint | info | Montgomery bounded exponentiation panics with accidental index error for oversized exponent_bits | — | PR |
| crypto-bigint | info | Int serde impl is unreachable because Int does not implement Encoding | — | PR |
| crypto-bigint | info | Zeroize can violate NonZero/Odd wrapper invariants | — | PR |
| nginx | high | HTTP/3 QPACK encoder stream reset leaves stale insert buffer pointer | CVE-2026-42530 | PR |
| aiohttp | low | Host-only cookies become domain cookies after CookieJar persistence | CVE-2026-54279 | PR |
| aiohttp | low | DigestAuthMiddleware uses credentials for redirect target challenges | CVE-2026-54276 | PR |
| aiohttp | medium | C HTTP parser bypasses max_line_size across fragmented lines | CVE-2026-54277 | PR |
| aiohttp | medium | WebSocket max_msg_size Is Enforced Only After Full Frame Buffering | CVE-2026-54274 | PR |
| aiohttp | low | TLS SNI/Hostname Verification Bypass Via Client Connection Reuse | CVE-2026-54275 | PR |
| aiohttp | low | HTTP/1 pipelined requests queue without a count limit | CVE-2026-54273 | PR |
| aiohttp | medium | Unread compressed request bodies bypass client_max_size during cleanup | CVE-2026-54278 | PR |
| aiohttp | low | Payload response resources stay open after mid-body disconnect | CVE-2026-54280 | PR |
| go-jose | medium | Missing protected JWE header causes panic after successful decryption | — | PR |
| freenginx | medium | HTTP/3 DATA prefix can exceed its heap allocation | — | PR |
| freenginx | low | mail auth HTTP can leave a stale session ctx after temp-pool destroy | — | PR |
| freenginx | low | mail proxy leaves a stale upstream connection pointer after close | — | PR |
| freenginx | low | gzip filter leaves `ctx->preallocated` stale after `ngx_pfree()` | — | PR |
| freenginx | medium | HTTP Perl async callbacks store unrefcounted `SV`/`CV` pointers | — | PR |
| freenginx | high | gRPC request serialization overflows on oversized HPACK :path | — | PR |
| freenginx | medium | Script no-cacheable variable re-evaluation can overflow generated buffers | — | PR |
| simplexmq | medium | IPv6 server URLs render ambiguous raw host and port pairs | — | PR |
| simplex-chat | medium | [Bug]: Downloaded image attachments can be decoded at full dimensions and exhaust client memory | — | PR |
| simplex-chat | medium | [Bug]: Android shared content size checks trust provider metadata before unbounded copy | — | PR |
| ansible | undetermined | security: C# FailJson exceptions leak no_log values | — | — |
| urllib3 | low | urllib3 accepts raw CR/LF in URL hosts and emits them in proxy CONNECT requests | — | PR |
| ansible | undetermined | security: password lookup follows symlinks when creating secret files | — | — |
| ansible | undetermined | security: async_status jid escapes async directory | — | — |
| ansible | undetermined | security: apt_key keyring paths inject extra key imports | — | — |
| ansible | undetermined | security: file recurse follows symlinks outside managed directories | — | — |
| kubernetes-client | undetermined | JDK HTTP client sends bodyless non-GET requests as GET | — | PR |
| sqlite | undetermined | Late vtab module registration leaves shadow tables writable | — | PR |
| kubernetes-client | undetermined | Kubeconfig `http://` proxy-url is bypassed for HTTPS clusters | — | PR |
| kubernetes-client | undetermined | `https://` proxy URL schemes are treated as plaintext HTTP proxies | — | PR |
| sqlite | undetermined | `%!J` UTF-8 precision expansion narrows four-gigabyte input | — | PR |
| sqlite | undetermined | Side-effect `sqlite_log()` is treated as innocuous | — | PR |
| sqlite | undetermined | `sqlite3_drop_modules()` races module hash iteration | — | PR |
| sqlite | undetermined | Serial type 10 smuggles virtual-table no-change value | — | — |
| sqlite | undetermined | json_pretty() reads past malformed JSONB object payload | — | PR |
| sqlite | undetermined | .archive extraction allows absolute sibling path escape | — | PR |
| sqlite | undetermined | Corrupt index cell pointer crosses page boundary | — | PR |
| sqlite | undetermined | Malformed UTF-8 precision in `%!s` allows oversized memcpy | — | PR |
| sqlite | undetermined | Crafted Rollback Journal Can Delete an Arbitrary File | — | PR |
| sqlite | undetermined | Heap buffer overflow in sqlite3ParseUri for over-1GiB file: URI filenames | — | PR |
| sqlite | undetermined | Odd UTF-16 prepare length reads past caller buffer | — | PR |
| kubernetes-client | undetermined | Fix CI auth safety bug | — | PR |
| sigstore | low | Key validity period not checked for verifications involving long-lived keys | — | PR |
| nss | undetermined | Heap Buffer Overflow in NSS Legacy libpkix HTTP OCSP Client | — | PR |
| pythondotorg | low | [PTP-PYTHON-007] Bug: release-file APIs accept new HTTP python.org URLs | — | PR |
| pythondotorg | medium | [PTP-PYTHON-001] Bug: ReleaseFile sidecar URLs can point to different artifacts | — | PR |
| release-tools | low | [PTP-PYTHON-008] Bug: add_to_pydotorg can leave partial release-file metadata after post failure | — | PR |
| borp | medium | borp UpdateColumns cached plan bypasses column filter | — | PR |
| borp | medium | Generated SQL does not escape identifier quote characters | — | PR |
| pythondotorg | medium | [PTP-PYTHON-004] Bug: inactive staff API keys still authorize v1 writes | — | PR |
| pythondotorg | medium | [PTP-PYTHON-003] Bug: v1 Tastypie writes accept staff sessions without API keys | — | PR |
| pythondotorg | medium | [PTP-PYTHON-005] Bug: v1 Tastypie accepts API keys in query strings | — | PR |
| pythondotorg | medium | [PTP-PYTHON-006] Bug: v1 Tastypie resources allow broad collection mutations | — | PR |
| pythondotorg | low | [PTP-PYTHON-009] Bug: delete_by_release silently honors extra filters | — | PR |
| release-tools | info | [PTP-PYTHON-012] Bug: free-threaded Windows artifacts are skipped by add_to_pydotorg | — | PR |
| pythondotorg | low | [PTP-PYTHON-014] Bug: custom 404 legacy link can point to an external URL | — | PR |
| go-jose | high | go-jose VerifyMulti can return a victim kid for an attacker-signed JWS | — | — |
| go-jose | medium | ParseSigned strips whitespace before JSON parsing and can smuggle unprotected JWS headers | — | PR |
| simplex-chat | medium | [Bug]: Desktop call localhost WebSocket accepts cross-origin browser control | — | PR |
| simplex-chat | medium | [Bug]: WebRTC call switch leaves abandoned preview media active | — | PR |
| simplex-chat | high | [Bug]: Relay short-link decompression can exhaust memory | — | PR |
| simplexmq | medium | Client-selectable APNS test provider sends APNS bearer traffic to localhost | — | PR |
| warehouse | info | README sanitizer allows active input controls | — | PR |
| warehouse | info | pip-audit release workflow exposes PyPI OIDC token before publish step | — | PR |
| warehouse | info | Warehouse can publish broadened Requires-Dist markers after packaging round trip | — | PR |
| simplex-chat | high | [Bug]: Inbound group role changes allow admin owner promotion | — | PR |
| simplex-chat | medium | [Bug]: Negative file invitations can bypass auto-receive and file-size gating | — | PR |
| rust | undetermined | rustc: unsafe checker skips `ExprKind::Reborrow { source }` and allows unsafe ops under `#![deny(unsafe_code)]` (`#![feature(reborrow)]`) | — | PR |
| rust | undetermined | rustc: `become` tail calls between `extern "rust-call"` fns can pass stale/uninitialized indirect tuple args at `-O` | — | PR |
| rust | undetermined | rustc: by-value `#[track_caller]` trait method called via `Box<dyn Trait>` uses a vtable shim that drops the caller-location ABI argument (`unsized_fn_params`) | — | PR |
| simplexmq | low | XFTP CLI receive path allows sender-controlled filename traversal | — | PR |
| simplexmq | medium | SNTRUP761 KEM bindings accept unchecked public key and ciphertext lengths | — | PR |
| simplexmq | medium | STM queue store LSET can hijack existing short-link ids | — | PR |
| simplexmq | high | XFTP FNEW creates durable metadata before upload or quota reservation | — | PR |
| simplexmq | low | Scripted SMP installs enable HTTPS without provisioning web credentials | — | PR |
| simplexmq | low | simplex-servers-update writes release metadata before creating parent directory | — | PR |
| simplexmq | high | XFTP redirected-description parser error reaches production innerHTML sink and can expose file secrets | — | PR |
| simplexmq | medium | XFTP web host gate accepts any referenced current host but fetches first replicas | — | PR |
| simplexmq | low | Production XFTP web bundle logs DH secrets and decrypted chunk bytes | — | PR |
| simplex-chat | low | [Bug]: Remote controller file upload path allows filename traversal | — | PR |
| simplex-chat | medium | [Bug]: Postgres delivery pagination can redeliver group events | — | PR |
| simplex-chat | high | [Bug]: Demoted admins keep a live group link that continues accepting joiners | — | PR |
| simplex-chat | high | [Bug]: Demoted channel owners can republish stale owner metadata into short-link data | — | PR |
| simplex-chat | high | [Bug]: Accepted senders can grow XFTP file descriptions without a total length or part-count limit before file acceptance | — | PR |
| simplex-chat | medium | [Bug]: Chat tag and TTL APIs mutate chats by raw ID without user ownership checks | — | PR |
| simplex-chat | low | [Bug]: Oversized relay delivery tasks can create durable empty delivery jobs | — | PR |
| crypto-bigint | info | UintRef slice copy length checks disappear in release builds | — | PR |
| crypto-bigint | low | BoxedUint BitOrAssign drops high limbs from wider RHS | — | PR |
| crypto-bigint | info | limb::nlimbs overflows before rounding large bit counts | — | PR |
| crypto-bigint | info | Uint div_exact panics on wide divisors with dividend-precision trailing zeros | — | PR |
| crypto-bigint | info | Modulus-one edge cases need canonicalization or rejection | — | PR |
| crypto-bigint | info | UintRef bytes_precision returns limb count instead of byte count | — | PR |
| crypto-bigint | low | MontyParams constant-time equality ignores mod_leading_zeros | — | PR |
| urllib3 | low | Absolute request targets include URL fragments | — | PR |
| aiohttp | medium | Numeric IPv4 host forms bypass aiohttp resolver policies | — | PR |
| aiohttp | low | Environment Proxy Credentials Leak to Different Proxy After Redirect | — | PR |
| warehouse | low | packaging DirectUrl credential stripping can leak password fragments | — | PR |
| simplex-chat | undetermined | [Bug]: Android service watchdog does not restart after normal teardown | — | PR |
| warehouse | info | README sanitizer ignores stricter policy overrides | — | PR |
| zlib | undetermined | Truncated gzip header name/comment reuse can over-read deflateSetHeader | — | — |
| warehouse | info | Linehaul ingestor retries poison gzip objects indefinitely | — | PR |
| warehouse | info | pipx: address zizmor findings in GitHub Actions | — | PR |
| warehouse | info | trove-classifiers release workflow exposes PyPI OIDC token before publish step | — | PR |
| warehouse | info | pipx release workflow exposes PyPI OIDC token before publish step | — | PR |
| warehouse | info | stdlib-list release workflow exposes PyPI OIDC token before publish step | — | PR |
| warehouse | info | linehaul release workflow exposes PyPI OIDC token before publish step | — | PR |
| warehouse | info | CI installs unpinned lint and test tooling from live PyPI | — | PR |
| warehouse | undetermined | pypa/build: backend-path containment can allow sibling directories | — | PR |
| pythondotorg | undetermined | [PTP-PYTHON-013] Bug: Fastly purge workflow executes path-derived keys in a secret-bearing shell | — | PR |
No matching fixes.
